$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa File: Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa (raw, json) Hash identifier: rD6KK9/ASgvw5nvASE9Sl3FiaZmYww7hdpWu3vSwSew= Subject key identifier: 66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 06E1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa Signing time: Tue 30 Apr 2024 01:49:38 +0000 ROA not before: Tue 30 Apr 2024 01:49:38 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 01:49:38 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=660ED696A007F1B0D808409A0B04499DDBF7430E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:c1:c3:29:7a:d4:0f:46:05:39:cc:bc:7e: 3e:b7:cb:8f:3c:bf:31:15:38:b9:78:e6:fe:5a:28: 23:98:2e:88:c4:1f:8c:e6:a9:46:0a:d5:2a:21:eb: 3b:36:46:4e:8e:ff:2e:67:20:cb:23:db:4c:ca:6f: dd:ca:c2:8c:3b:9d:7d:c6:31:c3:2b:a7:ae:c3:7f: 7e:a0:ea:1a:8d:76:79:3a:40:3f:a5:2c:c4:87:31: 00:23:c2:66:e5:bc:55:72:28:ff:d5:5f:b4:66:24: 56:fb:1f:cc:82:39:33:8e:be:ee:11:92:28:a7:c7: d5:a1:ce:d2:7a:d4:c0:7b:80:95:a0:b0:ed:8e:06: 65:61:1b:36:de:78:fe:52:e3:a7:be:a0:50:de:ad: ad:9c:2e:8d:c6:b7:04:3d:be:b6:46:d6:06:a0:56: cc:70:b5:fe:99:7c:0c:21:f8:26:1d:f3:72:ba:8e: a0:35:21:13:ca:f9:df:06:46:8e:eb:5f:e5:34:96: a5:6b:30:07:96:1b:a7:76:34:61:d0:f2:aa:12:0d: 0d:65:ff:c2:fc:50:98:94:33:e7:24:8a:8d:96:c9: 3d:b3:ce:4f:ef:ef:58:cc:1d:76:52:95:15:70:f3: 92:5b:94:78:c3:6e:52:ed:71:7b:98:aa:42:f6:1d: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.14.0/23 Signature Algorithm: sha256WithRSAEncryption e6:34:cb:dc:5c:4d:43:18:b5:1b:f9:eb:0b:06:2c:9f:85:9c: 31:c5:4a:b0:ae:c9:a9:0e:46:cf:0c:fe:05:26:a8:08:21:24: a2:45:f0:60:16:72:d3:14:47:40:59:ca:fc:a1:c7:24:2b:49: d6:4c:d1:a0:e4:0a:b2:f9:b8:86:cb:4b:ac:d4:d6:66:2f:fe: b9:1e:fd:fb:16:a7:e3:b6:d8:12:21:48:c3:ca:45:65:a7:9d: e1:26:ea:6d:fd:9a:4a:f1:a9:d4:21:ee:76:e8:9e:09:54:53: fe:bf:cf:dc:84:0c:0a:e7:fa:36:cf:ea:fd:92:b3:c0:74:40: a2:24:45:94:a3:90:75:6d:35:bd:ac:de:c2:ad:55:35:8c:85: 02:27:e4:54:e6:bd:ce:4d:d6:c2:7c:3e:dd:50:c2:44:db:e7: 14:d8:8a:d3:dc:4e:90:26:67:57:5d:02:4e:0b:df:41:b3:b3: 06:b6:f5:1f:92:b1:c1:04:09:97:80:02:03:06:1c:a1:9f:19: a3:17:ea:54:9e:ac:ec:5d:24:ba:52:60:a7:ec:b9:0f:58:05: 67:a6:90:eb:b5:4c:41:d3:21:6e:31:a3:39:45:97:d2:97:77: d4:0e:4a:da:8f:f0:75:8e:9b:38:e2:20:50:f9:b6:43:ab:04: 69:ab:33:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MTQ5MzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY2MEVENjk2QTAwN0Yx QjBEODA4NDA5QTBCMDQ0OTlEREJGNzQzMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLk8HDKXrUD0YFOcy8fj63y488vzEVOLl45v5aKCOYLojEH4zm qUYK1Soh6zs2Rk6O/y5nIMsj20zKb93Kwow7nX3GMcMrp67Df36g6hqNdnk6QD+l LMSHMQAjwmblvFVyKP/VX7RmJFb7H8yCOTOOvu4Rkiinx9WhztJ61MB7gJWgsO2O BmVhGzbeeP5S46e+oFDera2cLo3GtwQ9vrZG1gagVsxwtf6ZfAwh+CYd83K6jqA1 IRPK+d8GRo7rX+U0lqVrMAeWG6d2NGHQ8qoSDQ1l/8L8UJiUM+ckio2WyT2zzk/v 71jMHXZSlRVw85JblHjDblLtcXuYqkL2HUu5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZg7WlqAH8bDYCECaCwRJndv3Qw4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pnN1dscUFIOGJEWUNFQ2FDd1JKbmR2M1F3NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTg4wDQYJKoZIhvcNAQELBQADggEBAOY0y9xcTUMYtRv56wsGLJ+FnDHF SrCuyakORs8M/gUmqAghJKJF8GAWctMUR0BZyvyhxyQrSdZM0aDkCrL5uIbLS6zU 1mYv/rke/fsWp+O22BIhSMPKRWWnneEm6m39mkrxqdQh7nbonglUU/6/z9yEDArn +jbP6v2Ss8B0QKIkRZSjkHVtNb2s3sKtVTWMhQIn5FTmvc5N1sJ8Pt1QwkTb5xTY itPcTpAmZ1ddAk4L30Gzswa29R+SscEECZeAAgMGHKGfGaMX6lSerOxdJLpSYKfs uQ9YBWemkOu1TEHTIW4xozlFl9KXd9QOStqP8HWOmzjiIFD5tkOrBGmrM2k= -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:41 2025 by rpki-client